General
- Target 2026-10-07_dcc677a5cfb56abe3ab2088a340a8c9f_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample261008-ebdfjsat71
- SHA256 c9acd860dd806c54c936c1b0bb20ed7716497a56b0a858d5b3dc64052b6b3410
- MD5 dcc677a5cfb56abe3ab2088a340a8c9f
- SHA1 3995b6fc2de4f0748f7b006f5a80a422d22dfff4
- SHA512 542be6d0edbaba8400db9f7986275851fc6760494e4ee03a6b54881f558e40b5b7831d6089f3b8b60f651125648caa77f19cf4aba54f624ab8b0c14a95c7acd6
- SSDEEP 49152:+gvUDWv4eZuPpV1wrb/T8vO90d7HjmAFd4A64nsfJJKuu+rD5dGw1lfVNlNO549q:Z4eZuPpVmeITVDp9vsfEB+ey
- TLSH T1F2363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-07_dcc677a5cfb56abe3ab2088a340a8c9f_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-07_dcc677a5cfb56abe3ab2088a340a8c9f_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-07_dcc677a5cfb56abe3ab2088a340a8c9f_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 c9acd860dd806c54c936c1b0bb20ed7716497a56b0a858d5b3dc64052b6b3410
- MD5 dcc677a5cfb56abe3ab2088a340a8c9f
- SHA1 3995b6fc2de4f0748f7b006f5a80a422d22dfff4
- SHA512 542be6d0edbaba8400db9f7986275851fc6760494e4ee03a6b54881f558e40b5b7831d6089f3b8b60f651125648caa77f19cf4aba54f624ab8b0c14a95c7acd6
- SSDEEP 49152:+gvUDWv4eZuPpV1wrb/T8vO90d7HjmAFd4A64nsfJJKuu+rD5dGw1lfVNlNO549q:Z4eZuPpVmeITVDp9vsfEB+ey
- TLSH T1F2363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2